• cubicweb-mercurial-server
• #5731974 [schema] tighten permissions on MercurialServerConfig
• #2502648 info log prints out password in log
• #474704 have a conf file to avoid using a password in command line
• #1381390 Implement HTTP Strict Transport Security for https
• #102074 Pyro should run with ssl enabled
• #1681974 cubicweb-ctl shell and migration ignores uid
• #3154558 [security] rdefs using default read permissions: just do nothing
• #3770459 ldapfeed ignores ssl/tls certificates